Alien.Vault.Reputation: Retrieves Alien Vault's IP reputation database

In hrbrmstr/netintel: Various network intelligence routines

Description

Retrieves Alien Vault's IP reputation database.

Usage

Alien.Vault.Reputation(refresh = FALSE,
  alien.vault.reputation.url = "http://reputation.alienvault.com/reputation.data")

Arguments

refresh	refresh the database? (bool)
alien.vault.reputation.url	URL of the AlienVault data (chr) - defaults to http://reputation.alienvault.com/reputation.data

Details

AlienValut refreshes every hour, but the onus is on the caller to force a refresh. First-time call will setup a cache directory & file in the user's home directory, download & generate the data frame then write the data frame out as an R object. Future calls will just re-read this data frame unless refresh == TRUE should the function refresh the database.

Please be kind to the AlienValut servers & only refresh if you really need to.

Value

data.table with IP & Reputation information.

• IP - IPv4 address

• Risk - how risky is the target (1-10)

• Reliability - how reliable is the rating (1-10)

• Activity - what type of host is it

• Country - what is the IPv4 country of origin

• City - what is the IPv4 city of origin

• Latitude - geolocated latitude of the IPv4

• Longitude - geolocated longitude of the IPv4

See Also

• Background on AlienValut's IP rep db: http://labs.alienvault.com/labs/index.php/projects/open-source-ip-reputation-portal/download-ip-reputation-database/

• More info on AlienVault's database: http://www.slideshare.net/alienvault/building-an-ip-reputation-engine-tracking-the-miscreants

hrbrmstr/netintel documentation built on May 17, 2019, 5:11 p.m.